Conversation

Certificate Transparency is meant for browsers and website owners.

However, I estimate a majority of clients is only interested in discovering domain names, and never checks signatures. I am proposing an additional, optional, less secure, and 20x more efficient API for those clients.

This should make it possible to run a CT log with less than 1 Gbps.

https://groups.google.com/a/chromium.org/d/msgid/ct-policy/bcfca3d1-7547-4dc4-b43d-7bf1549f6815%40app.fastmail.com